Some vulnerabilities have been reported in UMN GopherD, some with unknown impacts, and others which potentially can be exploited by malicious people to execute arbitrary code.

1) The problem is that the user name parameter isn't verified before it is used in the "do_command()" function. This allows a malicious person to create a request which possibly could lead to execution of arbitrary code.

This has been reported to affect version 3.0.5 and earlier.

2) An integer overflow in "command.c" can be exploited by posting content with a certain size.

3) A format string error exists in "ftp.c" in a logging routine.

Solution
UMN GopherD has been discontinued.
Further details available in Customer Area

Provided and/or discovered by
1) nic0x333
2-3) jaguar

Changelog
Further details available in Customer Area

Original Advisory
http://www.debian.org/security/2005/dsa-638

Deep Links
Links available in Customer Area